VulnerabilityModified
CVE-2004-2601
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.php.
MEDIUM 6.4EPSS 1.45%
Does this matter?
Lower severity and a low EPSS score (1.45%). Track it; it rarely justifies an emergency change on its own.
Description
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.php.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.45% probability · 72th percentile
- CISA KEV
- Not listed
- Affected
- ubertec/help center live
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/13652Vendor Advisory
- http://securitytracker.com/id?1012685
- http://www.gulftech.org/?node=research&article_id=00058-12242004
- http://www.osvdb.org/12631
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18695
- http://secunia.com/advisories/13652Vendor Advisory
- http://securitytracker.com/id?1012685
- http://www.gulftech.org/?node=research&article_id=00058-12242004
- http://www.osvdb.org/12631
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18695
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.